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• The U.S. Air Force announced January 15 that 34 missile launch officers were removed 
from launch duty for allegedly cheating or tolerating cheating by others on routine 
proficiency tests at Malmstrom Air Force Base in Montana. - Associated Press (See item 



• ICS-CERT issued a security alert January 15 after a researcher revealed a zero-day 
vulnerability in Ecava’s InegraXor supervisory control and data acquisition (SC AD A) 
interface software. - Dark Reading (See item 28) 

• Solutionary found that cybercriminals are increasingly abusing major cloud services to 
create, host, and delete malicious Web sites. - Softpedia (See item 29) 

• A gunman killed two people at a Martin’s Super Market in Elkhart, Indiana, January 15 
before being shot dead by police in an exchange of gunfire. - Reuters (See item 32) 
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Energy Sector 



1. January 15, U.S. Department of Labor - (Texas) Lazarus Energy LLC cited by US 
Labor Department’s OSHA for exposing workers to chemical hazards at its 
Nixon, Texas, refinery; fines total $43,400. Lazarus Energy LLC was cited by the 
U.S. Department of Labor’s Occupational Safety and Health Administration January 15 
for 11 safety violations with proposed fines totaling $43,400 after an inspection at the 
company’s Nixon, Texas refinery. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25395 

2. January 15, Associated Press - (California) EPA finds safety violations at LA oil 
field. The U.S. Environmental Protection Agency notified AllenCo Energy January 15 
that they found several safety violations at its south Los Angeles oil field, which 
temporarily shut down operations November 2013. The company started updating 
operations to address the concerns. 

Source: http://www.adn.com/2014/01/15/3275031/epa-finds-safetv-violations-at.html 
For additional stories, see items 15 and 28 

[ Return to top ] 

Chemical Industry Sector 

See items 7 and 28 



T Return to topi 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 



T Return to topi 

Critical Manufacturing Sector 

3. January 15, U.S. Consumer Product Safety Commission - (International) American 
Honda recalls lawnmowers due to laceration hazard. American Honda announced a 
recall of about 20,800 Honda lawnmowers and Columbia brand walk-behind 21 -inch 
lawnmowers in the U.S. due to an issue which can cause the engine stop switch to 
malfunction and allow the blade to continue to rotate after the control lever is released. 
Source: http://www.cpsc.gov/en/Recalls/Recall-Alerts/2014/American-Honda-Recalls- 
Lawnmowers/ 



For another story, see item 28 
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Defense Industrial Base Sector 



See item 28 
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Financial Services Sector 

4. January 15, U.S. Attorney’s Office, Northern District of Ohio - (Ohio) Former CEO 
of Taupa Lithuanian Credit Union charged for $15 million fraud. The former CEO 
of the Taupa Lithuanian Credit Union in Cleveland was charged with allegedly 
embezzling money from the now-defunct credit union and conspiring with others to 
defraud the National Credit Union Administration, causing around $15 million in 
losses. 

Source: http://www.fbi.gov/cleveland/press-releases/2014/former-ceo-of-taupa- 
lithuanian-credit-union-charged-for- 1 5 -million-fraud 

5. January 15, Help Net Security - (International) User financial info compromised in 
US Fund for Unicef breach. The US Fund for Unicef non-profit notified the State of 
New Hampshire that it experienced a data breach in November 2013 that compromised 
personal and financial information of three New Hampshire residents, with residents in 
North Carolina and Maryland also potentially affected. 

Source: http://ww w.net- security.org/sec world.php?id= 16213 

For another story, see item 20 

[ Return to top ] 

Transportation Systems Sector 

6. January 16, Washington Observer-Reporter - (Pennsylvania) Man robs post office in 
Coal Center. A man robbed a United States Post Office in Coal Center, Pennsylvania, 
January 15 and left with an undisclosed amount of money. The post office was shut 
down for the remainder of the day. 

Source: http://www.observer- 

reporter. com/article/20 14011 5/NEW S01/1401 1961 0#.UtgD yRC wL9 V 

7. January 15, Los Angeles Times - (California) BNSF Railway to pay $140,000 over 
chemical spill near Port of L.A. Burlington Northern and Santa Fe Railway (BNSF) 
pleaded no contest and agreed to pay $140,000 in penalties and expenses for causing a 
public nuisance by failing to report that several drums of cargo being transported 
leaked phenol, cresylic acid, and other corrosive chemicals June 23, 2012 near the Port 
of Los Angeles. 

Source : http://www.latimes.com/science/la-me-0116-bnsf-spill- 
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201401 16,0,2923628.storv#axzz2qTcaPq9v 



8. January 16, WJLA 7 Washington, D.C. - (Washington, D.C.) Suitland Parkway 
accident kills construction worker. An accident on the Suitland Parkway January 16 
in Washington, D.C. killed one person and injured another, and closed traffic in both 
directions for roughly 6 hours. 

Source: http://www.wila.com/articles/2014/01/suitland-parkway-accident-kills- 
construction- worker-993 37 .html 

T Return to top i 

Food and Agriculture Sector 

9. January 16, KOLO 8 Reno - (National) USDA declares Nevada disaster area due to 
drought. The U.S. Department of Agriculture designated nine Nevada counties as 
natural disaster areas January 15 following major losses caused by recent drought 
conditions. Farmers and ranchers in 21 contiguous counties in Nevada, Arizona, Idaho, 
California, and Idaho are also eligible for natural disaster assistance. 

Source: http://www.kolotv.com/news/headlines/USDA-Declares-Disaster-Areas-Due- 
to-Drought-24052008 1 .html 

10. January 15, Jamestown Sun - (North Dakota; Montana; Washington) Cloverdale 
Foods recalling more than 2,600 pounds of beef franks. Cloverdale Foods Co., 
recalled more than 2,600 pounds of its beef franks products due to misbranding and 
undeclared milk, according to the U.S. Department of Agriculture’s Food Safety and 
Inspection Service. The issue was detected by the company during an internal review of 
a newly designed label, which included an incorrect ingredient statement. 

Source: http://www.iamestownsun.com/content/cloverdale-foods-recalling-more-2600- 
pounds-beef-franks 

T Return to top i 

Water and Wastewater Systems Sector 

11. January 16, Daily Journal News - (California) Water officials worry that Lake 
Pillsbury tap may be shut off. Pacific Gas and Electric asked the Federal Energy 
Regulatory Commission for permission to reduce minimum water releases from Lake 
Pillsbury to 20 cubic feet per second (cfs) from Scott Dam, 5 cfs to the East Branch of 
the Russian River, and 25 cfs to the Eel River below Cape Horn Dam. The Potter 
Valley Irrigation District also agreed to only withdraw 2 cfs from the East Branch of 
the Russian River in order to conserve water. 

Source: http://www.ukiahdailvioumal.com/news/ci 2492347 8/water-officials- worry- 
that-lake-pillsbury-tap-mav 

12. January 15, Charleston Gazette - (West Virginia) Parts of South Charleston under 
boil-water advisory. West Virginia American Water issued a boil-water advisory in 
certain areas of Charleston for about 1,000 customers after a water main break and 
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extensive flushing activities. 

Source: http://www.wvgazette.com/News/201401150022 
For another story, see item 28 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

13. January 16, WBRC 6 Birmingham - (Alabama) Berry Middle School students to 
return to school after coolant leak. Classes resumed at Berry Middle School in 
Birmingham January 16 after a coolant leak forced an evacuation and cancelled classes 
January 15 due to fumes and water in the school. 

Source: http://www.mvfoxal.com/story/24455179/coolant-leak-causes-evacuation-at- 
berr y-middle- school 

14. January 16, WGCL 46 Atlanta - (Georgia) 4 students injured, lanes closed in school 
bus accident in Cobb Co. Four students were injured after a Marietta City School bus 
and a car collided in Atlanta January 16. 

Source: http://www.cbsatlanta.com/story/24468960/cobb-countv-school-bus-crash- 
closes-lanes 

15. January 16, Associated Press - (Hawaii) Navy investigating possible fuel tank leak 
at Hawaii facility. The U.S. Navy is investigating a possible fuel leak at a tank at Red 
Hill Underground Fuel Storage Facility in Honolulu after fuel operators found a 
discrepancy in the tank’s levels January 13. Officials are taking manual measurements 
to determine if the tank lost fuel and began transferring fuel to another tank. 

Source: http://www.foxnews.com/us/2014/01/16/navv-investigating-possible-fuel-tank- 
leak-at-hawaii-facility/ 

16. January 15, Associated Press - (National) Air Force: 34 missile officers in cheating 
scandal. The U.S. Air Force announced January 15 that 34 missile launch officers were 
removed from launch duty for allegedly cheating or tolerating cheating by others on 
routine proficiency tests at Malmstrom Air Force Base in Montana. The alleged 
cheating was discovered during a prior probe of drug possession by 1 1 officers at 
several Air Force bases. 

Source: http://news.msn.com/us/air-force-34-missile-officers-in-cheating-scandal 

17. January 15, Associated Press - (Virginia) Navy jet crashes off Virginia coast, pilot 
ejected. The U.S. Navy reported that a Naval Air Station Oceana-based fighter jet 
crashed off the coast of Virginia January 15. The pilot was safely rescued after ejecting 
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from the jet. 

Source: http://www.huffingtonpost.com/2014/01/15/navy-iet-crash- 
virginia n 4604463.html 

18. January 15, WDTV 5 Weston - (West Virginia) Belington Elementary evacuated 
after odor detected, school canceled for Thursday. Belington Elementary School in 
West Virginia was closed January 16 after the school was evacuated and classes were 
dismissed January 15 due to a gas odor in the building. Authorities are still 
investigating the source of the odor that caused several students and teachers to be 
transported to an area hospital to be checked. 

Source: http ://w w w. wdtv .com/wdtv .cfm?func=view&section=5 - 
News&item=Belington-Elementary- Evacuated- After-Odor-Detected-School-Canceled- 
for-Thursday 13819 

[ Return to top ] 

Emergency Services Sector 

19. January 15, Poughkeepsie Journal - (New York) Former city firefighter accused of 
stealing union funds. A former city firefighter and treasurer of Local 596 City of 
Poughkeepsie Professional Firefighters was arrested on charges of stealing more than 
$78,000 from the New York-based union while serving from 2009 to 2013. 

Source: 

http://www.poughkeepsieiournal.com/article/20140116/NEWS05/301160019/Former- 

city-firefighter-accused-stealing-union-funds 

For another story, see item 30 
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Information Technology Sector 

20. January 16, Help Net Security - (International) Starbucks iOS app stores passwords 
in clear text. A security researcher disclosed that the Starbucks app for iOS stores user 
names, email addresses, and passwords in clear text. The information can be obtained 
even if the phone is locked. 

Source: http://www.net-security.org/secworld.php?id=16215 

21. January 16, Softpedia - (International) Highly critical vulnerability fixed with the 
release of Drupal 7.26 and 6.30. The developers of Drupal released Drupal versions 
7.26 and 6.30, addressing a highly critical vulnerability that could be used to 
impersonate users and take over accounts, and a moderately critical vulnerability that 
could be used to access unpublished or restricted content. 

Source: http://news.softpedia.com/news/Highlv-Critical-Vulnerabilitv-Fixed-with-the- 
Release-of-Drupal-7-26-and-6-30-417568.shtml 

22. January 16, The Register - (International) Microsoft confirms: Staff inboxes 
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hijacked amid ‘Syrian army’ cyber-blitz. Microsoft confirmed that a small number 
of Microsoft employee emails were compromised via phishing attacks during recent 
Twitter account and blog takeovers by the Syrian Electronic Army hacktivist group. 
Source: http://www.theregister.co.uk/2014/01/16/sea microsoft email compromised/ 

23. January 16, Softpedia - (International) Security patches released for IP. Gallery 4.2.1 
and 5.0.5. Invision Power Services released patches to close a cross-site scripting 
(XSS) vulnerability in IP. Gallery 4.2.1 and 5.0.5 related to Shockwave Flash file 
uploads. 

Source: http://news.softpedia.com/news/Securitv-Patches-Released-for-IP-Gallery-4-2- 
l-and-5-0-5-417560.shtml 

24. January 16, Softpedia - (International) AVG confirms one of its webservers was 
hacked and defaced. AVG confirmed that one of its Web servers was breached and 
defaced by hackers January 10. 

Source: http://news.softpedia.com/news/AVG-Confirms-Qne-of-Its-Webservers-Was- 
Hacked-and-Defaced-4 17781. shtml 

25. January 16, The Register - (International) Fine! We’ll keep updating WinXP’s 
malware sniffer after April, says Microsoft. Microsoft announced that it would 
continue to provide updates to antimalware programs for Windows XP beyond the 
operating system’s April 8, 2014 end of support, through July 14, 2015. 

Source: 

http://www.theregister.co.uk/2014/01/16/microsoft xp security updates extended/ 

26. January 16, IDG News Sendee - (International) Spammers target Snapchat, Bitly, 
and Kik Messenger. Symantec researchers identified a spam campaign that sends 
unsolicited contact requests for Kik Messenger via Snapchat, which leads to a spam bot 
that sends links shortened by the Bitly service which lead to sites trying to sign up users 
for webcam services. 

Source: 

http://www.computerwoiid.eom/s/article/9245471/Spammers target Snapchat Bitly a 
nd Kik Messenger 

27. January 16, Network World - (International) Cisco: Thousands of web hosting 
centers now launchpads for attacks. Cisco released its annual security report, which 
found that Web hosting centers were increasingly being compromised by 
cybercriminals for use in launching large-scale attacks in 2013, among other findings. 
Source: http://www.networkworld.com/news/2014/01 1614-cisco-web-hosting-centers- 
277621.html 

28. January 15, Dark Reading - (International) SCADA researcher drops zero-day, ICS- 
CERT issues advisory. The Industrial Control Systems Cyber Emergency Response 
Team (ICS-CERT) issued a security alert January 15 after a researcher revealed a zero- 
day vulnerability in Ecava’s InegraXor supervisory control and data acquisition 
(SCADA) interface software. A proof-of-concept was also released for the stack buffer 
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overflow issue. 

Source: http://www.darkreading.com/applications/scada-researcher-drops-zero- 
day-ics-cert/240 165420 

29. January 15, Softpedia - (International) Amazon, Google, and GoDaddy cloud 
services increasingly abused by cybercriminals. Solutionary released its SERT 
Quarterly Threat Analysis Report for the final quarter of 2013 and found that 
cybercriminals are increasingly abusing major cloud services to create, host, and delete 
malicious Web sites, among other findings. 

Source: http://news.softpedia.com/news/Amazon-Google-and-GoDaddy-Cloud- 
Services-Increasinglv-Abused-by-Cvbercriminals-417191.shtml 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

30. January 15, WAVE 3 Louisville - (Kentucky) AT&T outage affecting 3 counties, 

KSP post. A fiber line that was cut caused loss of Internet and phone service to 
residents in Owen, Henry, and Trimble counties as well as a Kentucky State Police Post 
January 15. Emergency calls to the affected post were transferred to Shelby County 
Dispatch. 

Source: http://www.wave3.com/storv/24465177/att-outage-affecting-3-counties-ksp- 
post 

31. January 15, White Plains Journal News - (New York) Bardonia man charged after 
cut Verizon wires cause outage. A Bardonia man was charged with intentionally 
cutting two Verizon wires, causing about $20,000 worth of damage as well as 
disrupting cable, Internet, and telephone service to homes and businesses in the area. 
Source: http://www.lohud.com/article/20140115/NEWS02/301 150079/B ardonia-man- 
charged-after-cut-Verizon-wires-cause-outage 
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Commercial Facilities Sector 

32. January 16, Reuters - (Indiana) Three killed in Indiana supermarket shooting: 
police. A gunman killed two people at Martin’s Super Market in Elkhart, Indiana, 
January 15 before being shot dead by police in an exchange of gunfire. Authorities are 
investigating the incident. 

Source: http://www.reuters.com/article/2Q14/01/16/us-usa-crime-indiana- 
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33. January 16, WFAA 8 Dallas - (Texas) Fast-moving 3-alarm blaze displaces 28 in 
northeast Dallas. Officials are investigating a 3 -alarm fire that erupted in the 
Northpark Terrace Apartments in northeast Dallas January 16. Eight units were 
damaged by the blaze, which displaced 28 residents. 

Source: http://www.wfaa.com/news/local/dallas/Fast-moving-3-alarm-blaze-displaces- 
28-in-northeast-Dallas-24048941 1 .html 

34. January 16, WNEW 99.1 FM Bowie - (Maryland) Man dies in Rockville apartment 
fire. One person died and residents of 29 units were displaced following a fire that 
broke out at a Rockville, Maryland apartment building January 16. The cause of the fire 
is under investigation. 

Source: http://washington.cbslocal.com/2014/01/16/man-dies-in-rockville-apartrnent- 
fire/ 



35. January 15, KYW-TV 3 Philadelphia - (Pennsylvania) Man dies after high-rise 

apartment fire in Center City. A fire that broke out at the Walnut Square Apartments 
in Philadelphia January 15, left 1 person dead and caused more than 100 units to 
evacuate for several hours. Authorities are investigating the cause of the fire and 
subsequent damages. 

Source: http://philadelphia.cbslocal.com/2014/01/15/fire-reported-at-center-citv-high- 
rise/ 
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Dams Sector 



See item 11 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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